Announcing Docker Scout Software Supply Chain Solution for Open Source Projects

As we , we’re now providing a free Docker Scout Team subscription to all (DSOS) program participa

As we , we’re now providing a free Docker Scout Team subscription to all (DSOS) program participants.  If your open source project participates in the DSOS program, you can today. If your open source project is not in the Docker-Sponsored Open Source program, you can . For other customers, Docker Scout is already . Refer to the product page to learn more. Docker Scout is a software supply chain solution designed to make it easier for developers to identify and fix supply chain issues before they hit production.  To do this, Docker Scout: Docker Scout allows you to prevent and address flaws where they start. By identifying issues earlier in the software development lifecycle and displaying information in Docker Desktop and the command line, Docker Scout reduces interruptions and rework. Supply chain security is a big focus in software development, with attention from enterprises and governments. Software is complex, and when security, reliability, and stability issues arise, they’re often the result of an upstream library. So developers don’t just need to address issues in the software they write but also in the software their software uses. These concerns apply just as much to open source projects as proprietary software. But the focus on improving the software supply chain results in an unfunded mandate for open source developers. A found that almost 25% of respondents said the cost of security gaps was “high” or “very high.” Most open source projects don’t have the budget to address these gaps. With Docker Scout, we can reduce the burden on open source projects. At Docker, we understand the importance of helping open source communities improve their software supply chain. We see this as a mutually beneficial relationship with the open source community. A well-managed supply chain doesn’t just help the projects that produce open source software; it helps downstream consumers through to the end user. For more information, refer to the .